Malicious doc with Embedded SettingContent-ms

Malicious doc with Embedded SettingContent-ms | IOCs

Try VMRay Analyzer

VTI SCORE: 91/100

Dynamic Analysis Report

Classification: Trojan

3c6a74d216e10e4ff158716cfa72984230995041c4bbb7596b8c8aaa461d76c5 (SHA256)

ggzn.doc

Word Document

Created at 2018-08-06 13:03:00

Indicators

Domain (1)

»

Domain	Sources
ipv4only.arpa	PCAP

IP (3)

»

IP	Protocols	Sources
192.0.0.170	UDP	PCAP
157.56.120.207	UDP	PCAP
87.142.158.138	UDP	PCAP

Export IOCs

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Screenshot